Re: Syndicate: virusNOTE! blank Syndicate mail with virus attached

[inke@snafu.de]

David wrote:

> I got mail from Syndicate with the attachment BKCLNPBK.EXE
> which is a virus.

Dear David, dear Syndicalists,

sad but true: it *is* a virus. My anti-virus protection made the screen turn black, and
then asked what I wanted to do with the virus. I said 
"delete" and then the whole screen went back to black again ;)  After a re-start
everything seems to be OK again, I am just checking the 
system.

I am sending you the full headers for the malevolent e-mail. It appears to originate from
"owner-syndicate@aec.at" (that's a spoofed 
one), but apparently, if you follow the route, it originally came from somewhere in
Belgium (planetinternet.be). Does somebody feel like 
following this trace?

I will definitely tell the sysops at aec.at to imediately close the list for any
attachments.

I hope that this virus did not damage anything on your computers systems ...

Greetings,
Inke

-------------------

               Return-path: <owner-syndicate@web.aec.at>
               Envelope-to: inke@snafu.de
               Delivery-date: Thu, 04 Jan 2001 19:52:37 +0100
               Received: from web.aec.at ([195.3.98.5])
                       by smart.visp-europe.psi.com with esmtp (Exim 3.14 #1)
                       id 14EFV5-0003dV-00; Thu, 04 Jan 2001 19:52:35 +0100
               Received: (from mdomo@localhost)
                       by web.aec.at (8.9.3/8.9.3) id TAA19181
                       for syndicate-outgoing; Thu, 4 Jan 2001 19:46:44 +0100
               From: owner-syndicate@aec.at
               X-Authentication-Warning: web.aec.at: mdomo set sender to owner-syndicate
using -f
               Received: from dhint (u212-239-129-131.dialup.planetinternet.be
[212.239.129.131])
                       by web.aec.at (8.9.3/8.9.3) with SMTP id TAA19177
                       for <syndicate@aec.at>; Thu, 4 Jan 2001 19:46:33 +0100
               Date: Thu, 4 Jan 2001 19:46:33 +0100
               Message-Id: <200101041846.TAA19177@web.aec.at>
               MIME-Version: 1.0
               Content-Type: multipart/mixed; boundary="--VECDQZ85"
               Sender: owner-syndicate@aec.at
               Precedence: bulk
               Bcc:
               X-UIDL: 1208198fc734ab7f1f2d9c2c0efa2575

               ----VECDQZ85
               Content-Type: text/plain; charset="us-ascii"



               ----VECDQZ85
               Content-Type: application/octet-stream; name="BKCLNPBK.EXE"
               Content-Transfer-Encoding: base64
               Content-Disposition: attachment; filename="BKCLNPBK.EXE"


------Syndicate mailinglist--------------------
 Syndicate network for media culture and media art
 information and archive: http://www.v2.nl/syndicate
 to unsubscribe, write to <syndicate-request@aec.at>
 in the body of the msg: unsubscribe your@email.adress